Looks like by design the default route is pointed via internal interface. Is it possible to force the default route via external interface? For example the traffic for pulseone.net has to leave via internal interface and redirected back towards the internet by some other network equipment.
It is possible to do this on a per host (destination) basis using static routes. See KB17635 - it explains how to do this for host service.pulsesecure.net however the same principle can be used for any host